This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer File: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer (raw, json) Hash identifier: GzKYF3XoaYS/9y0DKkITOUe8YCDYRCOozZLjFFvj02o= Subject key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77592B784BB0FD7665025F0AC6DB5141 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203964 IP: 185.150.232.0/22 IP: 185.168.40.0/22 IP: 213.190.24.0/22 IP: 2a07:7400::/29 IP: 2a0b:e600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2b:78:4b:b0:fd:76:65:02:5f:0a:c6:db:51:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b84b63058658a59ecbbf44395bf16f780dc929cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:ed:e4:31:e9:79:bd:86:13:58:5c:8d:b8: 81:36:51:98:03:5e:78:11:e9:90:2d:4a:55:dd:6b: c7:46:0d:71:32:29:43:27:c0:47:14:5d:81:73:3f: 77:f8:1f:4d:81:83:f1:80:16:d8:3d:68:05:ad:af: 6f:27:ad:2d:2d:5d:61:75:21:cf:56:33:f6:c5:7c: 49:bf:0f:b8:87:0d:e3:d2:a1:c6:73:89:86:ac:eb: 56:96:eb:5f:e6:b7:8c:99:d4:62:e1:ed:06:f0:78: 2b:22:ba:df:88:b1:1f:b6:f8:0d:fc:36:8a:6b:b4: 7b:ec:d9:9c:7b:c1:78:76:1c:ad:5d:21:c5:4e:96: 02:78:27:e8:86:56:ef:5f:ab:5c:bf:91:09:f2:38: 98:26:11:8b:4a:dd:19:db:0a:d5:a6:68:ad:ba:9c: ff:1f:14:07:d9:49:b2:32:db:d2:2a:6b:c4:a3:4f: c2:ee:78:2d:77:ea:02:32:b7:a9:32:b4:6f:b9:b3: 3c:89:8b:b1:5b:1f:fe:97:48:d1:7c:51:b5:c6:78: bc:c4:84:b6:1b:70:bb:1e:8a:9b:18:ec:72:13:28: c7:73:0c:55:64:0c:f1:24:49:9a:01:0d:a3:91:0e: c3:36:7b:87:f5:03:1f:b3:f2:2a:49:8e:c2:69:8e: 5f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.232.0/22 185.168.40.0/22 213.190.24.0/22 IPv6: 2a07:7400::/29 2a0b:e600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203964 Signature Algorithm: sha256WithRSAEncryption 98:ea:9e:1b:58:80:f4:a0:37:7e:76:05:97:bf:af:06:50:eb: e3:8c:49:1c:1b:03:58:35:9f:01:07:75:09:54:f8:ad:0d:a2: ac:e7:90:f7:ac:9f:75:c2:7b:b7:b4:f8:2b:67:16:c6:ee:ab: 49:dc:2e:6f:f3:32:75:f1:32:a2:b0:09:2f:13:ae:9e:ea:cc: 33:bd:66:6b:f9:79:29:98:f3:82:6b:b0:94:23:fc:87:59:44: 88:8f:1c:17:c9:db:70:30:60:eb:d4:fa:41:a7:4f:aa:03:37: 82:5d:88:91:5e:11:33:ca:75:47:54:0a:b0:2e:33:e5:fb:cb: cf:51:85:d4:b4:81:46:54:0f:db:7e:ab:c0:35:4d:60:62:ac: 29:fa:33:52:99:24:bb:e4:e3:0a:6f:9a:57:c5:2a:d0:07:16: 3f:d3:a4:ee:36:56:15:2b:ab:b5:5b:17:b3:69:ed:59:80:78: 89:bc:e7:5e:6d:c8:85:6e:99:52:1d:e6:b8:51:20:0b:b8:60: 77:74:2b:f5:61:28:23:77:5c:1b:50:54:9a:42:41:6d:0c:7c: df:06:94:21:5d:d5:70:d9:8d:3e:2f:83:fc:73:21:fe:97:a8: 5f:f2:3c:9e:96:f0:7b:ac:7a:90:63:85:fb:7a:dd:4b:71:48: 6c:24:b2:c9 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt3WSt4S7D9dmUCXwrG21FBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODRiNjMwNTg2NThhNTllY2JiZjQ0Mzk1YmYxNmY3ODBkYzkyOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlvt5DHpeb2GE1hcjbiBNlGYA154 EemQLUpV3WvHRg1xMilDJ8BHFF2Bcz93+B9NgYPxgBbYPWgFra9vJ60tLV1hdSHP VjP2xXxJvw+4hw3j0qHGc4mGrOtWlutf5reMmdRi4e0G8HgrIrrfiLEftvgN/DaK a7R77Nmce8F4dhytXSHFTpYCeCfohlbvX6tcv5EJ8jiYJhGLSt0Z2wrVpmitupz/ HxQH2UmyMtvSKmvEo0/C7ngtd+oCMrepMrRvubM8iYuxWx/+l0jRfFG1xni8xIS2 G3C7HoqbGOxyEyjHcwxVZAzxJEmaAQ2jkQ7DNnuH9QMfs/IqSY7CaY5fMwIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFLhLYwWGWKWey79EOVvxb3gNySnMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzFiYTAz ZC00MjRkLTQ3Y2UtOGJjNC1hMTM1Y2I1NTk3NTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvMWJhMDNk LTQyNGQtNDdjZS04YmM0LWExMzVjYjU1OTc1OC8xL3VFdGpCWVpZcFo3THYwUTVX X0Z2ZUEzSktjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCuZboAwQCuagoAwQC1b4YMBQEAgACMA4DBQMq B3QAAwUDKgvmADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDHLwwDQYJKoZIhvcN AQELBQADggEBAJjqnhtYgPSgN352BZe/rwZQ6+OMSRwbA1g1nwEHdQlU+K0Noqzn kPesn3XCe7e0+CtnFsbuq0ncLm/zMnXxMqKwCS8Trp7qzDO9Zmv5eSmY84JrsJQj /IdZRIiPHBfJ23AwYOvU+kGnT6oDN4JdiJFeETPKdUdUCrAuM+X7y89RhdS0gUZU D9t+q8A1TWBirCn6M1KZJLvk4wpvmlfFKtAHFj/TpO42VhUrq7VbF7Np7VmAeIm8 515tyIVumVId5rhRIAu4YHd0K/VhKCN3XBtQVJpCQW0MfN8GlCFd1XDZjT4vg/xz If6XqF/yPJ6W8HusepBjhft63UtxSGwkssk= -----END CERTIFICATE-----Generated at Mon Jan 12 22:57:48 2026 by rpki-client